The vulnerability CVE-2025-32267 is a CSRF issue in the wpzinc Post to Social Media – WordPress to Hootsuite plugin, affecting versions up to 1.5.8. It allows an attacker to trick authenticated users into submitting unauthorized requests, potentially leading to limited impact on the integrity of the system. The CVSS vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. Confidentiality and availability impacts are not present, with only a low impact on integrity.

The impact is limited to a low integrity impact due to the CSRF vulnerability, which could allow an attacker to cause a logged-in user to perform unintended actions within the affected plugin. There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling the plugin if possible or limiting user privileges to reduce risk. Monitor vendor channels for updates regarding patches or official mitigations.